Error reason

Xiaofeitu uses a Secure Sockets Protocol (SSL) provided by the Windows operating system, which contains encryption and decryption APIs used by HTTPS certificates. When it encounters encryption APIs that are not available in the Windows system, it will report this error.

Windows supports TLS versions

• windows7 and windows server 2008 R2It supports up to TLS 1.0.
• Windows 10 version 21H2 and Windows Server 2019It supports up to TLS 1.2.
• Windows 11 and Windows Server 2022It supports up to TLS 1.3.

Detailed document

• Windows version of TLS protocol supported in TLS/SSL (Schannel SSP)

If Windows 11 still reports errors when encountering TLS 1.3, in Windows PowerShell Execute the following code to output all security protocol types currently supported by the system:

Add-Type -AssemblyName System.ServiceModel [System.Enum]::GetNames([System.Net.SecurityProtocolType])

View current security protocols and set security protocols

[Net.ServicePointManager]::SecurityProtocol [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Ssl3 -bor [Net.SecurityProtocolType]::Tls -bor [Net.SecurityProtocolType]::Tls11 -bor [Net.SecurityProtocolType]::Tls12 -bor [Net.SecurityProtocolType]::Tls13

The TLS version used by the website

• Reference documents:How to check the TLS version used by a website

Software questions

Why can Chrome/Edge run on Windows 7/Windows 2008 systems?

• Because software such as Chrome and Edge have a built-in HTTPS certificate encryption/decryption API.

Why doesn't Xiaofeitu have a built-in encryption/decryption API?

• First, HTTPS uses many encryption protocols, which can only be implemented using third-party built-in components, but this increases the software size several times over, which is not desirable.
• Secondly, third-party components are constantly being updated and encrypted, requiring ongoing updates and maintenance. However, using the built-in Windows system eliminates this concern; simply updating the Windows system to the latest version resolves the issue.
• Finally, these encryption/decryption APIs are too complex and are not the direction for research.